Padding Oracle Hunter is a Burp Suite extension that helps penetration testers quickly identify and exploit the PKCS#7 and PKCS#1 v1.5 padding oracle vulnerability.
Features
Currently, the extension consists of 2 separate tabs PKCS#7 and PKCS#1 v1.5, which support the following functionalities:
- PKCS#7 - Identify and perform the padding oracle attack targeting the PKCS#7 padding scheme on CBC block cipher. The attack allows plaintext recovery and modification without knowing the key.
- PKCS#1 v1.5 - Identify and perform the padding oracle attack targeting the PKCS#1 v1.5 padding scheme on RSA Cryptosystem. The attack allows the plaintext to be recovered with only the public key information.
For further usage instructions, please refer to the source GitHub repository